Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Sr. Application Security Engineer

hims & hers149 open roles

Pay
$135,000 – $165,000 a year
Where
US - Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr. Application Security Engineerhims & hers · US - Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on hims & hers's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. hims & hers postings stay open a median of 22 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 3 days ago

hims & hers median: 22 days open

The posting

Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by putting the customer first and delivering access to care that is affordable, accessible, and personal, from diagnosis to treatment to delivery. No two people are the same, so we provide access to personalized care designed for results. By normalizing health & wellness challenges and innovating on their solutions, we’re making better health outcomes easier to achieve.

Hims & Hers is a public company, traded on the NYSE under the ticker symbol “HIMS.” To learn more about the brand and offerings, you can visit hims.com/about http://hims.com/about and hims.com/how-it-works http://hims.com/how-it-works . For information on the company’s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit www.hims.com/careers-professionals http://www.hims.com/careers-professionals.

ABOUT THE ROLE:

We are seeking a Senior Application Security Engineer to join our security team. This role will focus on ensuring the security of our applications throughout the development lifecycle, with an emphasis on modern security practices. You will work closely with development teams to implement secure coding practices and maintain our application security posture.

YOU WILL:

- Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications

- Perform code reviews and provide secure coding guidance to development teams

- Implement and maintain GitHub Advanced Security, including secret scanning and code scanning

- Work with Engineering teams to triage and fix identified vulnerabilities

- Support CI/CD security integration and automation

- Review and secure API implementations, with focus on GraphQL security

- Maintain security documentation

YOU HAVE:

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

- 5-8 years of experience in application security or related security field

- Hands-on coding experience and ability to review code in multiple languages

- Professional experience with SAST tools (e.g., GHAS)

- Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP)

- Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource)

- Experience with GitHub Advanced Security features

- Strong understanding of OWASP Top 10 and secure coding practices

- Excellent communication skills to articulate security findings to technical and non-technical stakeholders

PREFERRED QUALIFICATIONS

- Cloudflare WAF and Bot Management configuration (nice to have)

- Security automation and scripting (Python, Go, or similar)

- Contributions to the security community (research, tools, presentations)

- Experience in healthcare or regulated industries

TECHNICAL STACK

- Security Tools:, Burp Suite, GitHub Advanced Security,

- Languages: Proficiency in reviewing Python, JavaScript, Java, Go, and other modern languages

- Development skills in languages like JS, TS. Familiarity with git.

- Cloud: AWS (primary), multi-cloud experience beneficial

- CI/CD: Experience with Jenkins, GitHub Actions, or similar

WHAT WE'RE LOOKING FOR

- Someone who can balance security requirements with business needs

- Strong collaborator who can work effectively with development teams

- Self-motivated individual who can manage multiple security assessments simultaneously

ADDITIONAL INFORMATION

This is a remote position. We are a healthcare company that adheres to NIST CSF, NIST 800-53, SOC 2, and PCI DSS compliance frameworks.

OUR BENEFITS (THERE ARE MORE BUT HERE ARE SOME HIGHLIGHTS):

- Competitive salary & equity compensation for full-time roles

- Unlimited PTO, company holidays, and quarterly mental health days

- Comprehensive health benefits including medical, dental & vision, and parental leave

- Employee Stock Purchase Program (ESPP)

- 401k benefits with employer matching contribution

- Offsite team retreats

We are committed to building a workforce that reflects diverse perspectives and prioritizes ethics, wellness, and a strong sense of belonging. If you're excited about this role, we encourage you to apply—even if you're not sure if your background or experience is a perfect match.

Hims considers all qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Hims & Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at [email protected] and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims & Hers gives consideration to all qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address.

To learn more about how we collect, use, retain, and disclose Personal Information, please visit our Global Candidate Privacy Statement https://www.hims.com/global-candidate-privacy-statement.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against hims & hers's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on hims & hers's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    hims & hers's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.